Groups > misc.phone.mobile.iphone > #92826

Re: How to check validity of suspicious looking SMS message text URL?

From	Snit <usenet@gallopinginsanity.com>
Newsgroups	misc.phone.mobile.iphone, alt.os.linux, comp.mobile.android
Subject	Re: How to check validity of suspicious looking SMS message text URL?
Date	2016-09-22 19:38 -0700
Message-ID	<D409E3CA.7E1AE%usenet@gallopinginsanity.com> (permalink)
References	<ns2051$15hl$1@gioia.aioe.org>

Cross-posted to 3 groups.

Show all headers | View raw

On 9/22/16, 6:22 PM, in article ns2051$15hl$1@gioia.aioe.org, "Horace
Algiers" <horace@horacealgiers.com> wrote:

> Is there *anything* a user can do to check the URL without going to that
> URL?
> 
> Just received this text on my cell phone:
> http://i.cubeupload.com/k8CbNK.png
> 
> All I know is where it (says it) comes from:
> http://i.cubeupload.com/QD1o9F.png
> 
> Of course, I could just delete it (and will); but my question here is how
> can I find out *more information* about whether this is a phishing attempt
> of some sort.
> 
> Of course, the text itself has to be ignored - and I'm pretty sure the
> phone number itself can easily be spoofed (spoofcard, for example), so the
> only real hint of the purpose is at the end of the URL.
> 
> The domain of the URL appears to be a redirector site (much like
> tinyurl.com); so what matters most is the payload at the end of the URL.
> 
> Without actually going to that URL, is there a way to find out *more data*
> about what this message is all about?
> 
> For example, is there a trusted aggregator where we can *forward* such
> messages to?
> 
> Or is there a web site where we can paste in the URL to find out more data?
> 
> I googled the URL, but the result was "Your search - message
> http://bit.do/cBuHr 681-207-8069 - did not match any documents".
> 
> Is there *anything* a user can do to check the URL without going to that
> URL?

<http://bit.do/faq/#preview>
    -----
    How to preview shortened URLs?
    You can find out what is the destination address (expand a short
    link) and view to where the link will redirect without going to
    the final destination. Just add "/expand/" to the short link
    address. Example: http://bit.do/expand/shortlink
    -----
    
So in the case of yours go to http://bit.do/expand/cBuHr

That will tell you:
    -----
    Short link: http://bit.do/[REDACTED]
    Redirects to: http://www.rbusvv.com/
    -----
    
From there I went to: <http://whois.domaintools.com/rbusvv.com>

Gives you some info and a screen shot. There is also info on them online:

<http://www.scamadviser.com/is-rbusv.com-a-fake-site.html>
    -----
    Low Trust Rating. This Site May Not Be Safe to Use.
    -----

I think I would avoid it. :)


-- 
* OS X / Linux: What is a file?     <http://youtu.be/_dMbXGLW9PI>
* Mint MATE Trash, Panel, Menu:     <http://youtu.be/C0y74FIf7uE>
* Mint KDE working with folders:    <http://youtu.be/7C9nvniOoE0>
* Mint KDE creating files:          <http://youtu.be/N7-fZJaJUv8>
* Mint KDE help:                    <http://youtu.be/3ikizUd3sa8>
* Mint KDE general navigation:      <http://youtu.be/t9y14yZtQuI>
* Mint KDE bugs or Easter eggs?     <http://youtu.be/CU-whJQvtfA>
* Easy on OS X / Hard on Linux:     <http://youtu.be/D3BPWANQoIk>
* OS / Word Processor Comparison:   <http://youtu.be/w6Qcl-w7s5c>

Thread

csiph-web